70-411 Administering Windows Server 2012 - Practice Questions

Question 7 (Volume B)

Your network contains an Active Directory domain named adatum.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is configured as a Network Policy Server (NPS) server and as a DHCP server.

The network contains two subnets named Subnet1 and Subnet2. Server1 has a DHCP scope for each subnet.

You need to ensure that noncompliant computers on Subnet1 receive different network policies than noncompliant computers on Subnet2.

Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

Select all that apply, then click Submit answer.

○
The NAP-Capable Computers conditions
○
The NAS Port Type constraints
○
The Health Policies conditions
○
The MS-Service Class conditions
○
The Called Station ID constraints

Question 8 (Volume B)

Your network contains two Active Directory forests named contoso.com and adatum.com. The contoso.com forest contains a server named

Server1.contoso.com. The adatum.com forest contains a server named server2. adatum.com. Both servers have the Network Policy Server role service installed.

The network contains a server named Server3. Server3 is located in the perimeter network and has the Network Policy Server role service installed.

You plan to configure Server3 as an authentication provider for several VPN servers.

You need to ensure that RADIUS requests received by Server3 for a specific VPN server are always forwarded to Server1.contoso.com.

Which two should you configure on Server3? (Each correct answer presents part of the solution.

Choose two.)

Select all that apply, then click Submit answer.

○
Remediation server groups
○
Remote RADIUS server groups
○
Connection request policies
○
Network policies
○
Connection authorization policies

Reference / correct answer:

Remote RADIUS server groups

Connection request policies

To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

When you configure Network Policy Server (NPS) as a Remote Authentication Dial-In User Service (RADIUS) proxy, you use NPS to forward connection requests to RADIUS servers that are capable of processing the connection requests because they can perform authentication and authorization in the domain where the user or computer account is located. For example, if you want to forward connection requests to one or more RADIUS servers in untrusted domains, you can configure NPS as a RADIUS proxy to forward the requests to the remote RADIUS servers in the untrusted domain. To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

When you configure a remote RADIUS server group in NPS and you configure a connection request policy with the group, you are designating the location where NPS is to forward connection requests.

References:

http://technet.microsoft.com/en-us/library/cc754518.aspx

Question 9 (Volume A)

Your network contains an Active Directory domain named contoso.com. The domain contains a server named NPS1 that has the Network Policy Server server role installed. All servers run Windows Server 2012 R2.

You install the Remote Access server role on 10 servers.

You need to ensure that all of the Remote Access servers use the same network policies.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Select all that apply, then click Submit answer.

○
Configure each Remote Access server to use the Routing and Remote Access service (RRAS) to authenticate connection requests.
○
On NPS1, create a remote RADIUS server group. Add all of the Remote Access servers to the remote RADIUS server group.
○
On NPS1, create a new connection request policy and add a Tunnel-Type and a Service-Type condition.
○
Configure each Remote Access server to use a RADIUS server named NPS1.
○
On NPS1, create a RADIUS client template and use the template to create RADIUS clients.

Reference / correct answer:

On NPS1, create a new connection request policy and add a Tunnel-Type and a Service-Type condition.

Configure each Remote Access server to use a RADIUS server named NPS1.

Connection request policies are sets of conditions and settings that allow network administrators to designate which RADIUS servers perform the authentication and authorization of connection requests that the server running Network Policy Server (NPS) receives from RADIUS clients. Connection request policies can be configured to designate which RADIUS servers are used for RADIUS accounting.

When you configure Network Policy Server (NPS) as a Remote Authentication Dial-In User Service (RADIUS) proxy, you use NPS to forward connection requests to RADIUS servers that are capable of processing the connection requests because they can perform authentication and authorization in the domain where the user or computer account is located. For example, if you want to forward connection requests to one or more RADIUS servers in untrusted domains, you can configure NPS as a RADIUS proxy to forward the requests to the remote RADIUS servers in the untrusted domain.

To configure NPS as a RADIUS proxy, you must create a connection request policy that contains all of the information required for NPS to evaluate which messages to forward and where to send the messages.

Reference: http://technet.microsoft.com/en-us/library/cc730866(v=ws.10).aspx

70-411 – Administering Windows Server 2012